This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/TBEAu5KKSTnnuwJ2g_Z91zWbXKA.roa
File:                     TBEAu5KKSTnnuwJ2g_Z91zWbXKA.roa (raw, json)
Hash identifier:          smnw3toc9NIJXiN4piIx54U4f4Mbs+Yue06OIF7Ed2g=
Subject key identifier:   4C:11:00:BB:92:8A:49:39:E7:BB:02:76:83:F6:7D:D7:35:9B:5C:A0
Certificate issuer:       /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial:       019B77C753E0745EED2D26B678598FAB2E65
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/TBEAu5KKSTnnuwJ2g_Z91zWbXKA.roa
Signing time:             Thu 01 Jan 2026 04:18:30 +0000
ROA not before:           Thu 01 Jan 2026 04:18:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     196925
IP address blocks:        46.32.169.0/24 maxlen: 24
                          46.32.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:53:e0:74:5e:ed:2d:26:b6:78:59:8f:ab:2e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
        Validity
            Not Before: Jan  1 04:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4c1100bb928a4939e7bb027683f67dd7359b5ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:ef:25:49:be:59:d2:59:9b:32:64:7e:c7:
                    2c:08:24:39:e9:f1:ff:f6:75:bc:f7:4f:cb:ee:a3:
                    f1:69:de:5f:21:f3:e9:77:ec:fc:c1:b3:14:60:73:
                    7d:f5:86:f4:61:e4:16:bc:5d:77:8e:ca:cc:bd:9a:
                    de:e2:dc:b1:1f:02:70:76:7b:2a:8e:75:7d:5e:c5:
                    3c:c3:b2:83:d8:8f:74:e2:d9:fc:2b:c4:fe:77:9f:
                    3c:15:aa:a6:ea:60:ae:a9:46:3f:55:f7:86:1c:c4:
                    2f:58:da:03:33:33:0e:d6:fc:b3:8b:0e:84:4e:0e:
                    31:fa:43:5c:c3:e2:84:06:b2:5c:82:44:f9:e0:de:
                    6c:9b:26:df:d7:5f:8c:e0:34:36:ac:c4:a1:f8:93:
                    3a:6f:e4:64:63:66:86:a7:f9:2d:7b:a4:e2:d1:61:
                    f6:cd:29:7b:c9:bf:b4:1e:15:27:9c:fc:7f:ea:3b:
                    7d:10:ca:07:91:98:f4:b5:06:cd:9a:e3:b1:fd:8e:
                    0d:77:3a:ae:25:46:f6:74:32:1d:7a:92:3f:63:5e:
                    30:18:7c:02:93:7d:12:dd:c9:bb:37:87:3b:86:33:
                    38:c5:7b:ca:51:d4:27:28:32:d2:9e:f9:84:05:fb:
                    36:51:d6:93:1a:9e:87:30:5b:1b:f8:16:39:b0:92:
                    e0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:11:00:BB:92:8A:49:39:E7:BB:02:76:83:F6:7D:D7:35:9B:5C:A0
            X509v3 Authority Key Identifier:
                keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/TBEAu5KKSTnnuwJ2g_Z91zWbXKA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.32.169.0/24
                  46.32.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ef:3f:75:88:76:3e:e9:e1:4f:8b:6c:c5:45:00:43:3b:1f:
         b9:90:58:97:06:f4:71:34:93:36:f8:61:b2:0a:61:79:7c:ac:
         b9:9c:30:ef:06:77:84:97:22:d2:51:02:7f:6d:ca:89:d8:c2:
         68:86:e4:a4:c3:7e:b6:df:50:a3:a6:06:29:4c:4b:24:95:24:
         bb:d5:d9:e0:1d:71:1b:69:24:44:be:21:0a:4e:8a:b0:d0:fa:
         56:6e:31:2d:e1:b4:94:99:39:fa:1c:43:57:46:4a:e8:49:76:
         a0:44:5a:25:e4:35:cc:27:79:24:5f:f2:fa:a3:bf:44:8f:70:
         39:24:d8:a7:bf:9b:02:1f:d8:72:ed:30:03:5a:9b:cf:ea:1f:
         c8:bd:5c:05:7f:ba:75:56:c8:ed:2e:2c:1f:36:af:ac:52:92:
         f3:1e:74:57:90:38:3c:10:32:67:ff:05:72:93:f4:c4:f4:c6:
         b5:44:d6:c1:81:67:68:a4:eb:8d:9d:2b:dd:6e:6a:d7:56:a9:
         e7:6a:ab:08:a2:7e:16:de:6e:1c:1b:35:c6:ab:f7:44:4d:f6:
         14:d6:f7:97:cd:c2:e3:f0:3c:46:40:39:93:4d:f0:b3:19:24:
         58:9a:03:ed:fa:25:6c:bf:a4:fb:9e:0b:c4:48:48:b7:98:0c:
         48:c5:d0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:41:44 2026 by rpki-client